Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: 5MtHAEamXKqS4PGZ8vAYaOXWQL36o2MmLhbtAWWbLCs=
Subject key identifier: A4:D9:E7:15:21:B5:52:2E:2F:EB:73:75:2C:CF:86:35:EF:A0:6D:3D
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019F90599DFBC73DB33DCF7993686CE837FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 19:00:20 +0000
Manifest this update: Thu 23 Jul 2026 19:00:20 +0000
Manifest next update: Fri 24 Jul 2026 19:00:20 +0000
Files and hashes: 1: bVyEsAAvKQpoixKzifb7SAIwq1U.asa (hash: Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=)
2: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
3: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: T4s3slrJ7h2vHYlUH4WKxfGcS7gCDjhjP4L34XNjt9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:9d:fb:c7:3d:b3:3d:cf:79:93:68:6c:e8:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Jul 23 19:00:20 2026 GMT
Not After : Jul 24 19:00:20 2026 GMT
Subject: CN=a4d9e71521b5522e2feb73752ccf8635efa06d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:f0:2b:9b:f3:6c:48:55:bf:c6:d9:e1:04:
54:1d:a2:54:0a:1d:c6:67:1b:ff:a6:a8:f0:7d:36:
66:a0:11:ac:a4:0e:13:68:fa:b2:a4:22:67:09:2a:
38:ec:d8:9b:76:51:97:42:7d:2e:20:b1:b0:01:ee:
3f:da:47:5f:e0:b0:2f:d6:92:b4:bd:c1:d0:f7:ea:
79:e6:9d:17:85:1c:d2:a7:59:eb:36:e2:a2:61:a7:
cd:47:60:9b:20:59:70:82:86:25:9e:b7:c2:e6:57:
8f:95:12:dd:ee:72:c4:c5:94:c3:d7:f0:59:50:4b:
81:4e:db:96:c6:76:90:c1:79:f0:17:de:68:3d:36:
d1:4e:b9:c3:58:08:73:08:ff:db:0e:b0:62:e8:e8:
b9:0c:fc:87:02:d3:c0:fa:ed:c8:f5:dc:6d:18:1a:
57:84:16:3f:37:82:ac:01:bf:ef:a2:1e:b4:db:cb:
c5:b0:be:57:19:4e:e9:cc:1d:3a:b5:09:90:2a:6a:
97:08:38:c9:56:6e:3e:db:65:3b:81:46:bf:2e:df:
ab:a4:48:09:36:52:96:a5:ad:21:be:30:96:5e:30:
6f:be:9b:4b:1e:48:46:5d:3b:10:57:47:93:03:c8:
d4:70:43:b6:bb:01:2e:e7:05:4f:8c:47:96:6e:66:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:E7:15:21:B5:52:2E:2F:EB:73:75:2C:CF:86:35:EF:A0:6D:3D
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:58:f4:37:3b:90:4e:e9:1d:94:00:f3:7d:fa:d6:f9:f2:
23:10:b2:63:5d:a4:02:97:15:d5:ad:a6:1c:54:db:7a:31:dd:
b2:65:47:e6:a6:85:10:5b:58:77:97:5d:7d:5e:f5:42:f8:ac:
68:db:6e:e5:f0:7d:58:3c:24:e4:59:fb:6d:9d:21:4c:8f:df:
d1:1d:c3:59:93:a5:08:ac:cd:55:c0:c8:55:22:ed:35:84:57:
26:2f:a9:f6:c3:f3:c9:7c:68:de:91:c9:64:2b:83:35:6c:c8:
c3:0a:ea:4f:9d:41:a8:f1:76:32:2b:7f:3f:f8:75:44:1c:43:
76:5d:7f:43:2a:4b:0b:41:f3:0c:0d:92:49:4b:91:27:ef:8b:
e6:63:ed:46:44:e9:66:07:12:03:c0:32:e2:56:79:ea:45:65:
0f:67:f5:0e:63:b7:8b:a9:a5:55:4b:c8:5e:c4:d2:e5:f3:0f:
16:4f:06:b7:9a:83:31:0c:41:f0:7f:33:93:5f:ac:47:8c:ee:
ab:f9:aa:f4:4a:62:72:c6:6f:12:eb:0a:ca:be:7a:ed:4f:5b:
a4:c8:8f:0e:41:fc:7d:1e:aa:2e:03:17:14:1d:dd:3f:80:45:
e1:8f:d8:9e:7d:48:fd:de:33:6f:ac:92:09:5a:26:bc:eb:da:
61:a3:da:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZ37xz2zPc95k2hs6Df9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5
OWUyMzMwHhcNMjYwNzIzMTkwMDIwWhcNMjYwNzI0MTkwMDIwWjAzMTEwLwYDVQQD
EyhhNGQ5ZTcxNTIxYjU1MjJlMmZlYjczNzUyY2NmODYzNWVmYTA2ZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz/wK5vzbEhVv8bZ4QRUHaJUCh3G
Zxv/pqjwfTZmoBGspA4TaPqypCJnCSo47NibdlGXQn0uILGwAe4/2kdf4LAv1pK0
vcHQ9+p55p0XhRzSp1nrNuKiYafNR2CbIFlwgoYlnrfC5lePlRLd7nLExZTD1/BZ
UEuBTtuWxnaQwXnwF95oPTbRTrnDWAhzCP/bDrBi6Oi5DPyHAtPA+u3I9dxtGBpX
hBY/N4KsAb/voh6028vFsL5XGU7pzB06tQmQKmqXCDjJVm4+22U7gUa/Lt+rpEgJ
NlKWpa0hvjCWXjBvvptLHkhGXTsQV0eTA8jUcEO2uwEu5wVPjEeWbmbbawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTZ5xUhtVIuL+tzdSzPhjXvoG09MB8GA1UdIwQY
MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt
ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy
LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXhY9Dc7
kE7pHZQA83361vnyIxCyY12kApcV1a2mHFTbejHdsmVH5qaFEFtYd5ddfV71Qvis
aNtu5fB9WDwk5Fn7bZ0hTI/f0R3DWZOlCKzNVcDIVSLtNYRXJi+p9sPzyXxo3pHJ
ZCuDNWzIwwrqT51BqPF2Mit/P/h1RBxDdl1/QypLC0HzDA2SSUuRJ++L5mPtRkTp
ZgcSA8Ay4lZ56kVlD2f1DmO3i6mlVUvIXsTS5fMPFk8Gt5qDMQxB8H8zk1+sR4zu
q/mq9EpicsZvEusKyr567U9bpMiPDkH8fR6qLgMXFB3dP4BF4Y/Ynn1I/d4zb6yS
CVomvOvaYaPa3w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:04 2026 by rpki-client